wh0amis Goto Github PK

-e-cology-workflowservicexml-rce_poc

360quake

360 QuakeAPI批量查询工具

arbitraryfilereadlist

CTF中任意文件读取的fuzz列表 (Arbitrary file read fuzz list in CTF)

bug-monitor

Seebug、structs、cve漏洞实时监控推送系统🔦

bypass-php-gd-process-to-rce

Reference: http://www.secgeek.net/bookfresh-vulnerability/

bypass_disablefunc_via_ld_preload

bypass disable_functions via LD_PRELOA

caex

chunked-coding-converter

Burp suite 分块传输辅助插件

classhound

利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码

codeql-uboot

collection-document

Collection of quality safety articles

csonvps

CobaltStrike4.4 一键部署脚本 随机生成密码、key、端口号、证书等，解决cs4.x无法运行在Linux上报错问题 灰常银杏化设计

cve-2019-16097

CVE-2019-16097 PoC

cve-2020-11651

cve-2021-21972

VMware vCenter Server远程代码执行漏洞 (CVE-2021-21972)批量检测脚本

cves

A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.

daws

Advanced Web Shell

dockerizing-sqliscanner

Docker image for SQLiScanner

esaymanager

实现用户权限管理，资产手动添加，以及利用saltapi自动收集，适合分项目，分云商的管理需求

f-scrack

fastjsonvul

fastjson漏洞环境及poc

framework

ThinkPHP Framework

fuck_waf_jspx

能绕过waf的jspx cmd shell，参考了sevck前辈的https://www.cnblogs.com/sevck/p/7069251.html

hexo-theme-wikitten

A theme of Hexo for Wiki seem like Wikitten style.

hideshell

A JSP backdoor that enables under Tomcat hiding arbitrary JSP files, in addition to their access logs.

hwtools

iast

icsmaster

ICS/SCADA Security Resource（整合工控安全相关资源）

idatav

大屏数据可视化 Big screen data visualization demo

jackhammer

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.